General
-
Target
b5bc38a8e8dd14e5ab191f463c8dff01_JaffaCakes118
-
Size
1.3MB
-
Sample
240616-3et5gaxejp
-
MD5
b5bc38a8e8dd14e5ab191f463c8dff01
-
SHA1
841cec52295ed2df37dda6d78fd17655dd632a74
-
SHA256
97dfbc2165590884197f81b271e4e5707d7411c72d27a40febe47a6a626a93b2
-
SHA512
2364cecbd87925dce37d85063a1afbf03e9562778fe4b215840597db50fcb47971065b8e1cecfd14b53fcebb9594e5e0decaca4120284811ea6791c05628151b
-
SSDEEP
24576:GcEoL0otaYtXM6SprkM4FqD5Bl0ZHqU+BjHo+acjeBKq/13tdHbZKm51Ob83e:lQ7YtKrkruBl0ZHEj7LjeBKq/1XHNKmW
Malware Config
Targets
-
-
Target
b5bc38a8e8dd14e5ab191f463c8dff01_JaffaCakes118
-
Size
1.3MB
-
MD5
b5bc38a8e8dd14e5ab191f463c8dff01
-
SHA1
841cec52295ed2df37dda6d78fd17655dd632a74
-
SHA256
97dfbc2165590884197f81b271e4e5707d7411c72d27a40febe47a6a626a93b2
-
SHA512
2364cecbd87925dce37d85063a1afbf03e9562778fe4b215840597db50fcb47971065b8e1cecfd14b53fcebb9594e5e0decaca4120284811ea6791c05628151b
-
SSDEEP
24576:GcEoL0otaYtXM6SprkM4FqD5Bl0ZHqU+BjHo+acjeBKq/13tdHbZKm51Ob83e:lQ7YtKrkruBl0ZHEj7LjeBKq/1XHNKmW
Score8/10-
Removes its main activity from the application launcher
-
Loads dropped Dex/Jar
Runs executable file dropped to the device during analysis.
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
-
Queries account information for other applications stored on the device
Application may abuse the framework's APIs to collect account information stored on the device.
-
Queries information about running processes on the device
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Domain associated with commercial stalkerware software, includes indicators from echap.eu.org
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-